Test Kennung:	1.3.6.1.4.1.25623.1.0.122647
Kategorie:	Oracle Linux Local Security Checks
Titel:	Oracle: Security Advisory (ELSA-2007-1020)
Zusammenfassung:	The remote host is missing an update for the 'cups' package(s) announced via the ELSA-2007-1020 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'cups' package(s) announced via the ELSA-2007-1020 advisory. Vulnerability Insight: [1.2.4-11.14.el5_1.1] - Applied patch to fix CVE-2007-4351 (STR #2561, bug #353981). [1.2.4-11.14] - Applied patch to fix cupsd crash when failing to open a file: URI (STR #2351, bug #250415). [1.2.4-11.13] - Moved LSPP security attributes check before job creation (bug #231522). [1.2.4-11.12] - Moved LSPP access check before job creation (bug #231522). [1.2.4-11.11] - Better error checking in the LSPP patch (bug #231522). [1.2.4-11.10] - Applied patch to fix CVE-2007-3387 (bug #248223). [1.2.4-11.9] - Fixed IPv6 address parsing (bug #241400, STR #2117). - Fixed a bug that caused cups-lpd not to set the correct value for job-originating-host-name (bug #240223, STR #2023). - Cleaned up initscript error handling (bug #237953). - Fixed cups-lpd -odocument-format=... option (bug #230073, STR #2266). - Fixed If-Modified-Since: handling in libcups (bug #218764, STR #2133). - Make the initscript use start priority 56 (bug #213828). [1.2.4-11.8] - Applied fix for STR #2264 (bug #230118). - Added patch for UNIX domain sockets authentication (bug #230613). - LSPP: Updated patch for line-wrapped labels (bug #228107). [1.2.4-11.7] - Don't reload CUPS after rotating the logs with logrotate, but make sure to use the new file in that case (bug #215024). [1.2.4-11.6] - LSPP: added check_context() function for get_jobs(), get_job_attrs() and validate_user() (bug #229673). - Fixed a potential scheduler crash (bug #231522). Affected Software/OS: 'cups' package(s) on Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4351 http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html BugTraq ID: 26268 http://www.securityfocus.com/bid/26268 Cert/CC Advisory: TA07-352A http://www.us-cert.gov/cas/techalerts/TA07-352A.html CERT/CC vulnerability note: VU#446897 http://www.kb.cert.org/vuls/id/446897 Cisco Security Advisory: 20080625 Wide Area Application Services (WAAS) Common UNIX Printing System (CUPS) Vulnerability http://www.cisco.com/en/US/products/products_security_response09186a00809a1f11.html Debian Security Information: DSA-1407 (Google Search) http://www.debian.org/security/2007/dsa-1407 https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00012.html http://security.gentoo.org/glsa/glsa-200711-16.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:204 http://secunia.com/secunia_research/2007-76/advisory/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10604 http://www.redhat.com/support/errata/RHSA-2007-1020.html http://www.redhat.com/support/errata/RHSA-2007-1022.html http://www.redhat.com/support/errata/RHSA-2007-1023.html http://www.securitytracker.com/id?1018879 http://secunia.com/advisories/27233 http://secunia.com/advisories/27410 http://secunia.com/advisories/27445 http://secunia.com/advisories/27447 http://secunia.com/advisories/27474 http://secunia.com/advisories/27494 http://secunia.com/advisories/27499 http://secunia.com/advisories/27540 http://secunia.com/advisories/27577 http://secunia.com/advisories/27604 http://secunia.com/advisories/27712 http://secunia.com/advisories/28136 http://secunia.com/advisories/30847 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.501902 SuSE Security Announcement: SUSE-SA:2007:058 (Google Search) http://www.novell.com/linux/security/advisories/2007_58_cups.html https://usn.ubuntu.com/539-1/ http://www.vupen.com/english/advisories/2007/3681 http://www.vupen.com/english/advisories/2007/4238 http://www.vupen.com/english/advisories/2008/1934/references XForce ISS Database: cups-ippreadio-bo(38190) https://exchange.xforce.ibmcloud.com/vulnerabilities/38190
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.